5693 matches found
SQL Server Management Studio (September 2026)
The SQL Server Management Studio installation on the remote host is missing a security update. It is, therefore, affected by an other vulnerability: - Improper neutralization of special elements in output used by a downstream component 'injection' in SQL Server allows an unauthorized attacker to...
Vulnerabilities in SQL Server
Microsoft has identified 62 vulnerabilities in various components of SQL Server. Malicious actors could exploit these vulnerabilities to execute attacks that can cause damage, as listed in the table below. CVE-2026-67643 | 8.80 | Execution of arbitrary code | CVE-2026-67645 | 6.50 | Access to...
CVE-2026-78456
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-77486
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network...
CVE-2026-77487
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-77485
Use after free in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-77488
Integer underflow wrap or wraparound in SQL Server allows an authorized attacker to disclose information locally...
CVE-2026-77484
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-77480
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-77481
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-77482
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...
CVE-2026-77483
Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-73028
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-73029
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-69562
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network...
CVE-2026-68785
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-68786
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-68787
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...